CVE-2023-25314

概要

参考情報

• WWBN/AVideo commit 2b44dee · Patch

avideo のその他の脆弱性

• CVE-2026-47696中 4.3WWBN AVideo is an open source video platform. In 29.0 and earlier, plugin/AuthorizeNet/processPayment.json.php credits the logged-in user's …
• CVE-2026-47694中 5.4WWBN AVideo is an open source video platform. In 29.0 and earlier, AVideo stores category descriptions from user input and later renders cat…
• CVE-2026-46337中 5.3WWBN AVideo is an open source video platform. In 29.0 and earlier, an unauthenticated remote attacker can read arbitrary image files anywher…
• CVE-2026-45731中 4.9WWBN AVideo is an open source video platform. In 29.0 and earlier, view/update.php reads $_POST['updateFile'] as a relative path under updat…
• CVE-2026-45620中 5.3WWBN AVideo is an open source video platform. In 29.0 and earlier, objects/mention.json.php has no User::loginCheck() or admin gate. It only…